Skip to content
OpenAdvisories

Product · Tobesoft

Nexacro14

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2020-7874

    NEXACRO14 Runtime arbitrary file download and execution vulnerability

    Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of file download URL or …

    Tobesoft Nexacro14
  • High 7.8
    CVE-2019-19167

    Tobesoft Nexacro14 ActiveX File Download Vulnerability

    Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution.

    Tobesoft Nexacro14